PT-2025-5281 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.3 macOS versions prior to 14.7.3 macOS versions prior to 15.3 Description: The issue is related to insecure storage of confidential information in the MacOs operating system's Security component. It may allow an...

PT-2025-20740 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.3 visionOS versions prior to 2.3 iPadOS versions prior to 17.7.7 watchOS versions prior to 11.3 macOS Sonoma versions prior to 14.7.5 iOS versions prior to 18.3 iPadOS versions prior to 18.3 tvOS versions prior to...

PT-2025-5297 · Apple · Macos Ventura +9

Name of the Vulnerable Software and Affected Versions: iPadOS versions 17.7.4 and earlier macOS Ventura versions 13.7.3 and earlier macOS Sonoma versions 14.7.3 and earlier visionOS versions 2.3 and earlier iOS versions 18.3 and earlier iPadOS versions 18.3 and earlier macOS Sequoia versions 15.3...

PT-2025-1846 · WordPress · Wp Customer Area

Name of the Vulnerable Software and Affected Versions: WP Customer Area versions 8.2.4 and earlier Description: The issue is related to the lack of CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks. Recommendations: WP Custom...

PT-2025-5589 · Apache · Apache Cassandra

Name of the Vulnerable Software and Affected Versions: Apache Cassandra versions 4.0.0 through 4.0.15 Apache Cassandra versions 4.1.0 through 4.1.7 Apache Cassandra versions 5.0.0 through 5.0.2 Description: The issue allows users to access a datacenter or IP/CIDR groups they should not be able to...

PT-2025-5282 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.4 iOS versions prior to 18.3 iPadOS versions prior to 18.3 Description: The issue is related to the handling of symlinks, which could allow an attacker to modify protected system files by restoring a maliciously...

PT-2025-1300

Name of the Vulnerable Software and Affected Versions Apple products versions prior to visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3. Description A use-after-free issue exists in the Core Media component of Apple products. This issue allows a malicious...

PT-2025-1721 · WordPress · Zox News

Name of the Vulnerable Software and Affected Versions: Zox News theme for WordPress versions up to, and including, 3.16.0 Description: The Zox News theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the...

PT-2025-5474 · Unknown · Themefic Tourfic

Name of the Vulnerable Software and Affected Versions: Themefic Tourfic versions 2.15.3 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can lead to web shell attacks. Recommendations: For...

Amazon Linux 2023 : tomcat9, tomcat9-admin-webapps, tomcat9-el-3.0-api (ALAS2023-2025-813)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-813 advisory. Time-of-check Time-of-use TOCTOU Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for wri...

PT-2025-2884 · Sungrow · Sungrow Winet-Sv200

Name of the Vulnerable Software and Affected Versions: SunGrow WiNet-SV200 versions 0.001.00.P027 and earlier Description: The issue concerns hardcoded MQTT credentials in the affected software, allowing an attacker to send arbitrary commands to any inverter. Additionally, the lack of TLS to...

PT-2025-5531 · Wow Company · Wow-Company Modal Window

Name of the Vulnerable Software and Affected Versions: Wow-Company Modal Window versions through 6.1.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the user...

PT-2025-3408 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 0.8.0 Description: The issue is a heap-based buffer overflow in the gf m2ts process pmt function in media tools/mpegts.c:2163, which can cause a denial of service DOS via a crafted MP4 file. This can be exploited when processing ...

Amazon Linux 2023 : tomcat10, tomcat10-admin-webapps, tomcat10-el-5.0-api (ALAS2023-2025-814)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-814 advisory. Time-of-check Time-of-use TOCTOU Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for wri...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in rexml-3.3.6.gem

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of rexml-3.3.6.gem . Vulnerability Details CVEID:CVE-2024-49761 DESCRIPTION: REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an XML that has many digits...

PT-2025-3426 · Unknown · Online Pizza Delivery System

Name of the Vulnerable Software and Affected Versions: Online Pizza Delivery System version 1.0 Description: A Reflected Cross-Site Scripting XSS vulnerability exists in the search.php file of the Online Pizza Delivery System. The vulnerability allows an attacker to execute arbitrary JavaScript...

PT-2025-2237 · WordPress · Listamester

Name of the Vulnerable Software and Affected Versions: Listamester plugin for WordPress versions up to and including 2.3.4 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'listamester' shortcode due to insufficient input sanitization and output escaping on...

PT-2025-2997 · Centreon · Centreon Web

Name of the Vulnerable Software and Affected Versions: Centreon Web versions 23.04.x through 23.04.23 Centreon Web versions 23.10.x through 23.10.18 Centreon Web versions 24.04.x through 24.04.8 Centreon Web versions 24.10.x through 24.10.2 Description: A user with high privileges is able to...

CVE-2025-23087

CVE-2025-23087 entry is rejected/not used per CVE Program; it does not represent an active vulnerability.

PT-2025-1628 · Tcas Ii · Tcas Ii

Name of the Vulnerable Software and Affected Versions: TCAS II systems using transponders compliant with MOPS earlier than RTCA DO-181F Description: The issue allows an attacker to impersonate a ground station and issue a Comm-A Identity Request. This action can set the Sensitivity Level Control...